# Request for information re MOA data sharing

**URL:** <https://www.rubin.community/t/request-for-information-re-moa-data-sharing/11968>\
**Category:** Independent Data Access Centers\
**Created:** [May 11, 2026, 3:46pm UTC](https://www.rubin.community/t/request-for-information-re-moa-data-sharing/11968 "2026-05-11T15:46:14Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![pcowan](https://avatars.discourse-cdn.com/v4/letter/p/45deac/32.png) [@pcowan](https://www.rubin.community/u/pcowan)\
**Post date:** [May 11, 2026, 3:46pm UTC](https://www.rubin.community/t/request-for-information-re-moa-data-sharing/11968/1 "2026-05-11T15:46:14Z")

</div>

Hello @rra,

Our cloud team need the following information to provide the Rubin team a OIDC Redirect URI. :  
client\_id = “oidc-client-id”  
client\_secret = “oidc-client-secret”  
oidc\_issuer = “[https://idp.example.com](https://idp.example.com)”  
authorize\_scopes = “e.g. openid email profile”

Can you help? Thank you.

---

<div class="post-metadata">

**Author:** ![rra](https://sea2.discourse-cdn.com/flex002/user_avatar/www.rubin.community/rra/32/978_2.png) [@rra](https://www.rubin.community/u/rra)\
**Post date:** [May 11, 2026, 4:03pm UTC](https://www.rubin.community/t/request-for-information-re-moa-data-sharing/11968/2 "2026-05-11T16:03:30Z")

</div>

Hi Preeti,

I think [DMTN-253](https://dmtn-253.lsst.io/) should provide the necessary background including the scopes to use. The client ID and secret will be provided once your request is approved. The OIDC issuer information can be found in the OpenID Connect metadata published by data.lsst.cloud:

[https://data.lsst.cloud/.well-known/openid-configuration](https://data.lsst.cloud/.well-known/openid-configuration)

---

<div class="post-metadata">

**Author:** ![pcowan](https://avatars.discourse-cdn.com/v4/letter/p/45deac/32.png) [@pcowan](https://www.rubin.community/u/pcowan)\
**Post date:** [May 11, 2026, 11:03pm UTC](https://www.rubin.community/t/request-for-information-re-moa-data-sharing/11968/3 "2026-05-11T23:03:02Z")

</div>

Thank you, Russ. I have passed this on to our cloud team.

---

<div class="post-metadata">

**Author:** ![etan221-uoa](https://sea2.discourse-cdn.com/flex002/user_avatar/www.rubin.community/etan221-uoa/32/4137_2.png) [@etan221-uoa](https://www.rubin.community/u/etan221-uoa)\
**Post date:** [May 22, 2026, 4:37pm UTC](https://www.rubin.community/t/request-for-information-re-moa-data-sharing/11968/4 "2026-05-22T16:37:16Z")

</div>

@rra please see above

---

<div class="post-metadata">

**Author:** ![etan221-uoa](https://sea2.discourse-cdn.com/flex002/user_avatar/www.rubin.community/etan221-uoa/32/4137_2.png) [@etan221-uoa](https://www.rubin.community/u/etan221-uoa)\
**Post date:** [May 22, 2026, 4:37pm UTC](https://www.rubin.community/t/request-for-information-re-moa-data-sharing/11968/5 "2026-05-22T16:37:23Z")

</div>

Hi Russ, I am Eric Tan, the UOA developer.

How should we launch to request for a new client\_id and secret ?

Here or some other private communication channel ?

---

<div class="post-metadata">

**Author:** ![rra](https://sea2.discourse-cdn.com/flex002/user_avatar/www.rubin.community/rra/32/978_2.png) [@rra](https://www.rubin.community/u/rra)\
**Post date:** [May 26, 2026, 2:48pm UTC](https://www.rubin.community/t/request-for-information-re-moa-data-sharing/11968/6 "2026-05-26T14:48:38Z")

</div>

Yes, indeed, you should make the request here in this topic. We need the information listed in [DMTN-253](https://dmtn-253.lsst.io/), and then I’ll create the client and send you the information when the configuration is updated. We do that during Thursday maintenance windows.

---

<div class="post-metadata">

**Author:** ![etan221-uoa](https://sea2.discourse-cdn.com/flex002/user_avatar/www.rubin.community/etan221-uoa/32/4137_2.png) [@etan221-uoa](https://www.rubin.community/u/etan221-uoa)\
**Post date:** [June 3, 2026, 10:41pm UTC](https://www.rubin.community/t/request-for-information-re-moa-data-sharing/11968/8 "2026-06-03T22:41:49Z")

</div>

* * *

## Request for OIDC Client Credentials (client\_id / client\_secret)

### Organization & Contact Information

- **Organization Name:** University of Auckland - Faculty of Science - Vera Rubin Data Sharing API
- **Primary Technical Contact Email:** [researchmanagement@auckland.ac.nz](mailto:researchmanagement@auckland.ac.nz), [eric.tan@auckland.ac.nz](mailto:eric.tan@auckland.ac.nz)
- **Platform Purpose:** The Vera Rubin Data Sharing API is used to provide authenticated and throttle controlled access for external Research Collaborators to night sky images stored in a databased hosted at UoA. As a part of the University of Auckland’s engagement with the Vera Rubin Observatory, the Faculty of Science is looking to provide access to external collaborators from the Observatory to images of the night sky stored in the UOA data centre.

### Technical Metadata for Pre-Registration

In accordance with **DMTN-253** and the published metadata at `data.lsst.cloud`, we would like to request a `client_id` and `client_secret` with the following parameters:

- **Requested Client Name:** `uoapool-nonprod`
- **Grant Type:** `authorization_code`
- **Requested Scopes:** `openid`, `profile`, `email`, `rubin`
- **Token Endpoint Auth Method:** `client_secret_basic`

### Authorized Redirect URIs

Please register the following exact URI(s) for our authentication callbacks:

- **A short name for our IDAC:** `IDAC UOA nonprod`
- **redirect\_uri:** `https://uoapool-nonprod.auth.ap-southeast-2.amazoncognito.com/oauth2/idpresponse`

### Secure Key Delivery

Once approved, please let us know how your team prefers to securely transmit the generated `client_secret` to our technical contact (e.g., via encrypted email, 1Password link, or an established secure chat channel).

Thank you for your assistance in provisioning our access!

---

<div class="post-metadata">

**Author:** ![eric-el-tan](https://sea2.discourse-cdn.com/flex002/user_avatar/www.rubin.community/eric-el-tan/32/4157_2.png) [@eric-el-tan](https://www.rubin.community/u/eric-el-tan)\
**Post date:** [June 9, 2026, 4:24pm UTC](https://www.rubin.community/t/request-for-information-re-moa-data-sharing/11968/9 "2026-06-09T16:24:51Z")

</div>

Hi @rra, please advise

---

<div class="post-metadata">

**Author:** ![rra](https://sea2.discourse-cdn.com/flex002/user_avatar/www.rubin.community/rra/32/978_2.png) [@rra](https://www.rubin.community/u/rra)\
**Post date:** [June 9, 2026, 5:12pm UTC](https://www.rubin.community/t/request-for-information-re-moa-data-sharing/11968/10 "2026-06-09T17:12:06Z")

</div>

Hi Eric,

I’m just waiting for @knutago to approve. Hopefully he’ll have a chance to look at this soon.

---

<div class="post-metadata">

**Author:** ![eric-el-tan](https://sea2.discourse-cdn.com/flex002/user_avatar/www.rubin.community/eric-el-tan/32/4157_2.png) [@eric-el-tan](https://www.rubin.community/u/eric-el-tan)\
**Post date:** [June 16, 2026, 1:22am UTC](https://www.rubin.community/t/request-for-information-re-moa-data-sharing/11968/11 "2026-06-16T01:22:52Z")

</div>

@rra @knutago Kindly please update us the status. Thanks ~

---

<div class="post-metadata">

**Author:** ![knutago](https://sea2.discourse-cdn.com/flex002/user_avatar/www.rubin.community/knutago/32/602_2.png) [@knutago](https://www.rubin.community/u/knutago)\
**Post date:** [June 16, 2026, 9:56pm UTC](https://www.rubin.community/t/request-for-information-re-moa-data-sharing/11968/12 "2026-06-16T21:56:02Z")

</div>

Apologies, I missed the notifications! Yes this is approved, please go ahead.

---

<div class="post-metadata">

**Author:** ![rra](https://sea2.discourse-cdn.com/flex002/user_avatar/www.rubin.community/rra/32/978_2.png) [@rra](https://www.rubin.community/u/rra)\
**Post date:** [June 17, 2026, 11:17pm UTC](https://www.rubin.community/t/request-for-information-re-moa-data-sharing/11968/13 "2026-06-17T23:17:17Z")

</div>

This is queued up for our maintenance window tomorrow. I will send you the authentication details for your OIDC client via a 1Password link in DM once that’s deployed (late afternoon US Pacific time).

---

<div class="post-metadata">

**Author:** ![knutago](https://sea2.discourse-cdn.com/flex002/user_avatar/www.rubin.community/knutago/32/602_2.png) [@knutago](https://www.rubin.community/u/knutago)\
**Post date:** [June 18, 2026, 12:46am UTC](https://www.rubin.community/t/request-for-information-re-moa-data-sharing/11968/14 "2026-06-18T00:46:37Z")

</div>

Thank you!

---

<div class="post-metadata">

**Author:** ![rra](https://sea2.discourse-cdn.com/flex002/user_avatar/www.rubin.community/rra/32/978_2.png) [@rra](https://www.rubin.community/u/rra)\
**Post date:** [June 18, 2026, 10:52pm UTC](https://www.rubin.community/t/request-for-information-re-moa-data-sharing/11968/15 "2026-06-18T22:52:39Z")

</div>

The new client has been enabled in data.lsst.cloud and I’ve sent Eric the credentials in DM.

---

<div class="post-metadata">

**Author:** ![eric-el-tan](https://sea2.discourse-cdn.com/flex002/user_avatar/www.rubin.community/eric-el-tan/32/4157_2.png) [@eric-el-tan](https://www.rubin.community/u/eric-el-tan)\
**Post date:** [June 22, 2026, 11:54pm UTC](https://www.rubin.community/t/request-for-information-re-moa-data-sharing/11968/16 "2026-06-22T23:54:05Z")

</div>

@rra@knutago Well received. Thanks.

---

<div class="post-metadata">

**Author:** ![eric-el-tan](https://sea2.discourse-cdn.com/flex002/user_avatar/www.rubin.community/eric-el-tan/32/4157_2.png) [@eric-el-tan](https://www.rubin.community/u/eric-el-tan)\
**Post date:** [July 9, 2026, 9:10am UTC](https://www.rubin.community/t/request-for-information-re-moa-data-sharing/11968/17 "2026-07-09T09:10:15Z")

</div>

@rra

---

<div class="post-metadata">

**Author:** ![eric-el-tan](https://sea2.discourse-cdn.com/flex002/user_avatar/www.rubin.community/eric-el-tan/32/4157_2.png) [@eric-el-tan](https://www.rubin.community/u/eric-el-tan)\
**Post date:** [July 9, 2026, 9:10am UTC](https://www.rubin.community/t/request-for-information-re-moa-data-sharing/11968/18 "2026-07-09T09:10:18Z")

</div>

Hi @rra, kindly please update the following at your side:

- **Requested Client Name:** `uoapool-vera-rubin-nonprod`
- **A short name for our IDAC:** `IDAC UOA Vera Rubin nonprod`
- **redirect uri:** [https://vera-rubin-nonprod.auth.ap-southeast-2.amazoncognito.com/oauth2/idpresponse](https://vera-rubin-nonprod.auth.ap-southeast-2.amazoncognito.com/oauth2/idpresponse)

It’s because UOA have setup a new AWS Cognito to handle the authentication with Vera Rubin.

Please let us know when this will be updated at your side, so we may start testing the authentication flow.

---

<div class="post-metadata">

**Author:** ![rra](https://sea2.discourse-cdn.com/flex002/user_avatar/www.rubin.community/rra/32/978_2.png) [@rra](https://www.rubin.community/u/rra)\
**Post date:** [July 9, 2026, 5:48pm UTC](https://www.rubin.community/t/request-for-information-re-moa-data-sharing/11968/19 "2026-07-09T17:48:44Z")

</div>

Just to make sure I understand, is this a request to change the return URL for your existing registered client, or a request to add a new, second client?

---

<div class="post-metadata">

**Author:** ![eric-el-tan](https://sea2.discourse-cdn.com/flex002/user_avatar/www.rubin.community/eric-el-tan/32/4157_2.png) [@eric-el-tan](https://www.rubin.community/u/eric-el-tan)\
**Post date:** [July 10, 2026, 5:10pm UTC](https://www.rubin.community/t/request-for-information-re-moa-data-sharing/11968/20 "2026-07-10T17:10:49Z")

</div>

@rra , update an existing registered client please.

---

<div class="post-metadata">

**Author:** ![rra](https://sea2.discourse-cdn.com/flex002/user_avatar/www.rubin.community/rra/32/978_2.png) [@rra](https://www.rubin.community/u/rra)\
**Post date:** [July 15, 2026, 8:26pm UTC](https://www.rubin.community/t/request-for-information-re-moa-data-sharing/11968/21 "2026-07-15T20:26:20Z")

</div>

This change is queued for our maintenance window tomorrow (15:00 Pacific time, 20:00 UTC) and should be deployed then. I’ll let you know when it’s live.

[Next page](https://www.rubin.community/t/request-for-information-re-moa-data-sharing/11968.md?page=2)
